General

  • Target

    2024-04-30_634655c1e0efd50c37663d79a8ccecc5_cryptolocker

  • Size

    89KB

  • MD5

    634655c1e0efd50c37663d79a8ccecc5

  • SHA1

    71674354c4a444c41ea48619f78c83c0f9ce18ce

  • SHA256

    b7adf3819125d0b276e75318723baa858f7c243fa5a3fbe00c21c8c392fae8ae

  • SHA512

    8e560cb4c452822ba235113d3d100b1009ee5abe3861f3a726f2903541bbf3672932e97406d5994c661173608cd72d9b3bc5c97114572f28fb61acc7021b8662

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgI+:AnBdOOtEvwDpj6zD

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_634655c1e0efd50c37663d79a8ccecc5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections